images.navy.gov.au XSS vulnerability

Vulnerable URL: http://images.navy.gov.au/?URL=https%3A%2F%2Fwww.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No...

U.S. Dept Of Defense: Reflected XSS in a Navy website

A cross-site scripting vulnerability was found on a Navy website which may trick a web user into executing a malicious script, potentially revealing a user's web session information or modify web content. juliocesar was able to demonstrate this vulnerability by crafting a specially formatted URL...

U.S. Dept Of Defense: Unrestricted File Upload

A Navy system had a file upload tool accessible from the Internet. This would have permitted an attacker to upload malicious files and potentially execute code on the server. Thanks to @hogarth45 for reporting it...

U.S. Dept Of Defense: Reflected XSS on a Navy website

A U.S. Navy website was vulnerable to a reflected cross-site scripting attack which may be used to trick a web user into executing a malicious script, potentially revealing a user's browser cookies or modify web content. samux was able to demonstrate this vulnerability by crafting a specially...

Air Navy Fighters Lite - Base64 encoded String, Corrupted files, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Air Navy Fighters Lite published at the 'play' market has multiple vulnerabilities...

Navy War Russian Submarine 3D - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Navy War Russian Submarine 3D published at the 'play' market has multiple vulnerabilities...

Navy Gunner Shoot War 3D - Dynamic Code Loading, External URLs, Native code usage vulnerabilities

HackApp vulnerability scanner discovered that application Navy Gunner Shoot War 3D published at the 'play' market has multiple vulnerabilities...

navybay.co.uk XSS vulnerability

Vulnerable URL: http://www.navybay.co.uk/shop/search.php?q=%22%3E%3Csvg%2Fonload%3Dprompt%28%2FXSSPOSED%2F%29%3E Details: Description| Value ---|--- Patched:| Yes, at 06.12.2015 Latest check for patch:| 06.12.2015 07:23 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa...

navyenlist.com XSS vulnerability

Vulnerable URL: http://www.navyenlist.com/join/?subject=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 25.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 10998701 Google Pagerank| 2 VIP website status:| No Check navyenlist.com SS...

Windows XP Security Support Ends

Yes, there are still some rather large organizations maintaining their investments in Windows XP, as we recently learned when an unclassified U.S. Navy document showed that it had extended a support contract with Microsoft for two more years meaning that its systems will continue to receive XP...

Senator Demands Answers on FBI's Use of Zero Days, Phishing

The chairman of the powerful Senate Judiciary Committee is asking some pointed questions of the FBI director about the bureau’s use of zero-day vulnerabilities, phishing attacks, spyware, and other controversial tools. Sen. Charles Grassley R-Iowa has sent a letter to FBI Director James Comey...

Dennis Fisher and Mike Mimoso on the OPM Hack Hearing and More

Dennis Fisher and Mike Mimoso discuss the brutal House Oversight Committee hearing on the OPM breach, the Navy soliciting zero days, the LastPass breach, and the Cardinals-Astros hacking story. Download: digitalunderground208.mp3 Music by Chris Gonsalves...

US Navy Soliciting Zero Days

The National Security Agency may find and purchase zero days, but that doesn’t mean it’s sharing its hoard with other government agencies such as the U.S. Navy, which apparently is in the market for some unpatched, undisclosed vulnerabilities of its own. A request for proposal posted last...

Suricata IDPE 2.0.3 - Open Source Next Generation Intrusion Detection and Prevention Engine

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. OISF is part of and funded by the Department of...

Threat Outbreak Alert RuleID10961: Email Messages Distributing Malicious Software on August 5, 2014

Medium Alert ID: 35177 First Published: 2014 August 5 19:47 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10961 may contain the following files: Name | Si...

US Navy's Nuclear Reactor System Administrator Arrested on Hacking Charges

The United States charged two men for their involvement in a conspiracy to hack into the computer systems of dozens of government and commercial organizations, including the U.S. Navy and National Geospatial-Intelligence Agency NGA, according to the U.S. Attorney's Office in Tulsa. On Monday, the...

Iranian Hackers infiltrated US Navy computers

The Wall Street Journal reported that Iranian hackers have successfully penetrated unclassified US Navy computers, the allegations were made by US officials that consider the attacks a serious intrusion within the Government network. "The U.S. Officials said the attacks were carried out by hacker...

How I Got Here: Rich Mogull

Dennis Fisher talks with Rich Mogull of Securosis about his days as a teen wannabe hacker, his meandering path through Navy ROTC, software development, near miss with medical school, mountain rescues and his life as a security industry analyst. Download: 08mogull.mp3...

[Suricata v1.4.4] Next Generation Intrusion Detection and Prevention Engine

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. OISF is part of and funded by the Department of...

MiniDuke Espionage Campaign Began About a Year Earlier Than First Thought

Researchers have found an earlier version of the MiniDuke espionage malware that dates to June 2011 – almost a year ahead of the previously oldest variant designed to spy on NATO, European governments and U.S. research and think tanks. Unlike the cyberspyware discovered last week, this one embedd...